Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
File: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json)
Hash identifier: qvu1QeOeu8mB7SYv230pfO/HEzeXbI/DTPJsw/x3mGc=
Subject key identifier: 83:C2:50:25:E6:54:DD:28:51:77:41:8B:97:98:11:A5:4E:15:00:7A
Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
Certificate issuer: /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Certificate serial: 01976F2CBB32C83E1BFB19BC4D5CC127F782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 16:01:31 +0000
Manifest this update: Sat 14 Jun 2025 16:01:31 +0000
Manifest next update: Sun 15 Jun 2025 16:01:31 +0000
Files and hashes: 1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: 4joMUNJtmfldJm9Zo6oQofQJG10OfoH99YL2hBWDsko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:bb:32:c8:3e:1b:fb:19:bc:4d:5c:c1:27:f7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Validity
Not Before: Jun 14 16:01:31 2025 GMT
Not After : Jun 15 16:01:31 2025 GMT
Subject: CN=83c25025e654dd285177418b979811a54e15007a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:79:cc:80:2f:c1:4f:69:b1:cb:04:0b:5c:
5e:da:70:f9:a3:30:ac:be:70:0f:cb:65:6c:b7:c1:
b3:ff:a8:c2:d1:5a:71:ac:10:ff:5a:1b:2f:f2:a0:
6c:23:be:f0:e8:cc:66:91:01:03:07:a4:72:5b:79:
92:38:04:70:e4:9c:a0:80:2b:12:87:31:a8:88:fa:
57:59:81:7e:d9:2a:bb:b8:3b:70:40:17:8c:6f:cb:
a0:8e:bc:ab:42:b9:fb:ad:b0:be:83:1c:ac:de:99:
d5:6c:a7:25:b3:8b:a0:3e:16:ee:82:3a:71:63:e7:
b4:c0:a1:f9:d7:41:01:9d:11:59:25:08:67:a7:7e:
35:75:2d:0f:86:ff:5c:24:19:5b:3d:45:59:3f:e9:
89:21:42:af:a6:11:f7:32:a0:01:3d:1a:34:0c:3c:
94:0a:85:99:99:97:ee:b7:93:c9:e2:93:26:22:82:
3b:7c:44:41:31:38:e3:6a:52:df:a4:ca:c3:50:2e:
5a:b6:2b:37:30:ad:e7:6a:75:f4:00:ec:36:dc:30:
dd:6f:fb:55:23:da:1e:47:7b:4c:04:44:44:56:2f:
3a:b3:f0:53:69:06:8a:23:e2:20:2a:c3:59:e5:84:
67:48:2b:af:1b:1b:34:73:92:1a:25:0a:cb:2a:4c:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C2:50:25:E6:54:DD:28:51:77:41:8B:97:98:11:A5:4E:15:00:7A
X509v3 Authority Key Identifier:
keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:49:24:2d:50:32:34:f4:f1:53:dd:eb:86:eb:a5:03:67:6c:
e6:45:ac:b7:d7:28:ef:03:e7:0f:45:d5:5d:ef:e9:15:d5:27:
17:6e:f8:9e:e1:8b:e7:cd:0a:6d:1f:53:ab:e3:47:24:9d:f9:
65:29:66:35:53:27:e3:bc:fa:43:c0:26:2e:ae:09:5c:38:b7:
34:dd:a1:11:e4:c2:04:cc:a6:06:76:86:37:31:2c:47:d9:27:
85:1c:2a:23:00:62:e4:22:85:2a:e5:57:ed:5c:e9:90:5b:b0:
ad:b2:b7:66:bd:d3:86:ad:45:5d:59:42:86:bc:b8:a6:5e:0a:
63:b6:65:24:59:7b:22:db:d8:f4:a4:02:fe:08:83:3f:65:21:
10:74:d7:24:d6:2e:98:c9:9a:40:dd:69:11:c4:7b:ee:d5:bf:
7d:09:de:b8:0e:bf:76:bf:f3:a7:70:da:4f:4c:9c:66:d1:6d:
ac:44:5a:6e:e5:4a:21:fc:ee:7b:ed:11:f8:63:49:85:0c:23:
52:74:1e:15:67:01:fa:35:a5:ce:d7:5e:25:81:c3:ac:c7:1f:
59:73:58:5d:e9:2e:a1:99:aa:59:5e:42:96:f7:b2:b5:3d:15:
74:9a:fd:50:af:da:85:0b:f8:72:e9:a2:97:2c:c7:9b:fc:3e:
89:d1:44:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLLsyyD4b+xm8TVzBJ/eCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTRkMTQ1ZWU4OWIyN2IxNTUzZDU1MWMyMGExNWJjNmJi
ZjZkNjkwHhcNMjUwNjE0MTYwMTMxWhcNMjUwNjE1MTYwMTMxWjAzMTEwLwYDVQQD
Eyg4M2MyNTAyNWU2NTRkZDI4NTE3NzQxOGI5Nzk4MTFhNTRlMTUwMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13R5zIAvwU9pscsEC1xe2nD5ozCs
vnAPy2Vst8Gz/6jC0VpxrBD/Whsv8qBsI77w6MxmkQEDB6RyW3mSOARw5JyggCsS
hzGoiPpXWYF+2Sq7uDtwQBeMb8ugjryrQrn7rbC+gxys3pnVbKcls4ugPhbugjpx
Y+e0wKH510EBnRFZJQhnp341dS0Phv9cJBlbPUVZP+mJIUKvphH3MqABPRo0DDyU
CoWZmZfut5PJ4pMmIoI7fERBMTjjalLfpMrDUC5atis3MK3nanX0AOw23DDdb/tV
I9oeR3tMBEREVi86s/BTaQaKI+IgKsNZ5YRnSCuvGxs0c5IaJQrLKkx1lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPCUCXmVN0oUXdBi5eYEaVOFQB6MB8GA1UdIwQY
MBaAFOKk0UXuibJ7FVPVUcIKFbxrv21pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZjY0MWItZTJhNS00YzFhLWJmMjEt
YzNiOWYyMDEzMzJlLzEvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZjY0MWItZTJhNS00YzFhLWJmMjEtYzNiOWYyMDEzMzJl
LzEvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkkkLVAy
NPTxU93rhuulA2ds5kWst9co7wPnD0XVXe/pFdUnF274nuGL580KbR9Tq+NHJJ35
ZSlmNVMn47z6Q8AmLq4JXDi3NN2hEeTCBMymBnaGNzEsR9knhRwqIwBi5CKFKuVX
7VzpkFuwrbK3Zr3Thq1FXVlChry4pl4KY7ZlJFl7ItvY9KQC/giDP2UhEHTXJNYu
mMmaQN1pEcR77tW/fQneuA6/dr/zp3DaT0ycZtFtrERabuVKIfzue+0R+GNJhQwj
UnQeFWcB+jWlztdeJYHDrMcfWXNYXekuoZmqWV5ClveytT0VdJr9UK/ahQv4cumi
lyzHm/w+idFEOg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:22 2025 by rpki-client